System management user interface providing user access to status information for process control system equipment including displayed propagated status in a navigation pane

ABSTRACT

A system management human-machine interface application for use in a process control system is described herein that enables users to view/monitor information regarding system status and performance and to initiate changes to the operation of system equipment, checkpoint control stations and execute diagnostics. A system management graphical user interface (GUI) includes a number of interface features that enhance the accessibility of system status information to users. Such enhancements include rendering selectable diagnostic information (e.g., online/offline status) on a system component navigation view. The GUI also provides access to a variety of system information including: alarms, messages, watched system management parameters, and a legend for symbols displayed in a system management navigation tree. Other enhancements include: a search function for quickly locating a device in the system to render detailed information, a navigation tree that displays equipment status via icons, and propagating fault statuses up to a highest level of the navigation tree.

CROSS-REFERENCE TO THREE RELATED APPLICATIONS

This application relates to Sherrill et al., U.S. patent applicationSer. No. (unassigned), Attorney Docket number 233746, filed on Apr. 11,2006, entitled “SYSTEM MANAGEMENT USER INTERFACE PROVIDING USER ACCESSTO STATUS INFORMATION FOR PROCESS CONTROL SYSTEM EQUIPMENT,” thecontents of which are expressly incorporated herein by reference intheir entirety, including any references therein.

This application relates to Sherrill et al., U.S. patent applicationSer. No. (unassigned), Attorney Docket number 251713, filed on Apr. 11,2006, entitled “SYSTEM MANAGEMENT USER INTERFACE PROVIDING USER ACCESSTO STATUS INFORMATION FOR PROCESS CONTROL SYSTEM EQUIPMENT INCLUDING ASEARCH FUNCTION,” the contents of which are expressly incorporatedherein by reference in their entirety, including any references therein.

This application relates to Sherrill et al., U.S. patent applicationSer. No. (unassigned), Attorney Docket number 251714, filed on Apr. 11,2006, entitled “SYSTEM MANAGEMENT USER INTERFACE PROVIDING USER ACCESSTO STATUS INFORMATION FOR PROCESS CONTROL SYSTEM EQUIPMENT INCLUDING ASTATUS MONITOR,” the contents of which are expressly incorporated hereinby reference in their entirety, including any references therein.

FIELD OF THE INVENTION

The present invention generally relates to the field of computerizedcontrol systems. More particularly, the invention concerns applicationprograms including graphical human-machine interfaces for monitoring thestatus of and/or exercising supervisory control over equipment used tomonitor and/or control processes. Such interfaces often provide multiplescreens tied to data representing the status of the control components(both hardware and software) including control processors, gateways,switches, workstations, I/O modules, data access servers, etc.

BACKGROUND

Industry increasingly depends upon highly automated data acquisition andcontrol systems to ensure that industrial processes/operations runefficiently, safely and reliably while lowering overall costs. In suchsystems, data acquisition begins with sensors measuring currentvalues/status of process variables representing the status/operation ofan industrial process or operation. The measurements are communicated toprogrammed controllers and data collection/management systems. The datacollection/management systems, generally including process databases anddata processing routines, manage and maintain the measurement data. Suchdata management and maintenance includes further processing the data(e.g., filtering), storing the data, and distributing the data to avariety of client applications. Such client applications include bothautomated and manual supervisory control processes and display/monitoruser interfaces.

Industrial process/operation measurements come in a wide variety offorms and are used by industrial process control systems to regulate avariety of operations, both with respect to continuous and discretemanufacturing processes. By way of example the measurements produced bysensors include: a temperature, a pressure, a pH, a mass/volume flow ofmaterial, a quantity of bottles filled per hour, a tallied inventory ofpackages waiting in a shipping line, or a photograph of a room in afactory. Often, sophisticated automated process management and controlhardware/software examine acquired process/operation measurement data,and respond by sending messages/signals to actuators/controllers thatadjust the operation of at least a portion of the industrial process.The data produced by the sensors is also provided to human-machineinterface (HMI) applications. The HMI applications support a variety ofviews that enable an operator to perform a number of supervisory tasksincluding: tailor the process (e.g., specify new set points) in responseto varying external conditions (including costs of raw materials),detect an inefficient/non-optimal operating condition and/or impendingequipment failure (alarm), and take remedial actions such as shut down aprocess or move equipment into and out of service as required.

System management application components execute in a supervisory rolein process control systems to monitor operational status and overallhealth of the portions of a process control system that are responsiblefor acquiring process status information and applying decisions to thedevices that control the processes. The system management components arebasically responsible for monitoring and controlling theequipment/devices that control the process itself. In this role, thesystem management application components receive a variety of statusdata regarding the health and performance of process control systemequipment including, for example: control processors, network switches,fieldbus modules, field devices connected to a process control network.The system management application components are also capable of takingactions, based upon the equipment status information, to alter theoperation of system equipment. Such actions include: inhibiting/enablingalarms, checkpointing, rebooting, enabling/disabling upload,enabling/disabling download, enabling/disabling reports, goingonline/offline, running diagnostics, calibrating,

Vast quantities of various types of information are received by thesystem management application components. Some of the information isreceived and acted upon automatically by programmed system managementcomponents without user intervention/knowledge. However, otherinformation is acquired and organized for display by a user interfacesubsystem on a graphical user interface (GUI) at a monitor station.Generally, increasing the types of information that can be presented toa human user improves the ability of the user to make decisionsregarding the operation of the process control system equipment.However, when very large quantities of information of many types areinvolved, such information diminishes in value as the informationbecomes less accessible. It is therefore desirable to present systemmanagement information via a user interface in a manner that enhancesits ability to be located and understood by users.

SUMMARY OF THE INVENTION

In accordance with the present invention, a system management HMIapplication is provided that includes a multi-paned interface. Anavigation pane includes a hierarchical tree including nodescorresponding to control system equipment. A component-specificinformation pane provides detailed information corresponding to aselected node on the navigation pane. The detailed information includesdiagnostic information. Furthermore, the hierarchical tree includes alogical monitor node at a level above a highest equipment node withinthe hierarchical tree and wherein status of lower, physical equipment,nodes propagates from the lower nodes up to the logical monitor node.

BRIEF DESCRIPTION OF THE DRAWINGS

While the appended claims set forth the features of the presentinvention with particularity, the invention, together with its objectsand advantages, may be best understood from the following detaileddescription taken in conjunction with the accompanying drawings ofwhich:

FIG. 1 is schematic network diagram showing an exemplary controlenvironment comprising both a control network and anapplication/supervisory network suitable for carrying out an embodimentof the present invention;

FIG. 2 is a schematic diagram of a system management HMI application andassociated components that execute on a workstation node communicativelycoupled to one or more process control system status data sources thatsupply system status data to the workstation and receive commands fromthe system management HMI application;

FIG. 3 is an exemplary system management HMI application display;

FIG. 4 is an exemplary portion of a system management HMI applicationGUI for presenting counter diagnostic information;

FIG. 5 is an exemplary connections information pane displayingcomponent-specific connection information showing connectivity to anetwork segment;

FIG. 6 is an exemplary accessories pane including a search userinterface and results area enabling selection of particular searchresult entries for displaying system equipment specific information;

FIG. 7 is an exemplary navigation pane portion including a set ofequipment icons and associated status indicators; and

FIG. 8 is a legend identifying a set of equipment icons and statusindicators. user interface depicting a set of area view choices for avisualization application.

DETAILED DESCRIPTION

A system management human-machine interface (HMI) application for use inprocess control systems is described herein that enables users toview/monitor information regarding system status and performance and toinitiate changes to the operation of system equipment (e.g.,controllers, fieldbus modules, etc.), checkpoint control stations andexecute diagnostics. One aspect of the system management applicationcomprises a system management graphical user interface (GUI) thatincludes a number of interface features that enhance the accessibilityof system status information to users. Such enhancements includerendering selectable diagnostic information (e.g., online/offlinestatus) on a system component navigation view. The GUI also providesaccess to a variety of system information including: alarms, messages,watched system management parameters, and a legend for symbols displayedin a system management navigation tree.

The system management application also includes a search functionalitythat links a listing of system search results to associated information.Tying the listed results to information structures associated with theidentified system components allows a user to navigate automatically toa system component and open its information by selecting the systemcomponent from a set of system component search results.

The system management application also includes a navigation treewherein the status of system components represented in the navigationtree is reflected in one or more visual traits (e.g., text, color,icons).

Yet another aspect of the user interface that enhances a user's overallexperience is an enhanced diagnostics feature incorporated within anavigation tree view wherein status information is propagated up ahierarchically arranged set of ancestor nodes on the navigation tree.Thus, an alarm originating from a currently hidden node is visuallydepicted within the tree. A user thereafter opens the ancestor nodes toreach the system node from which the alarm originates.

Each of the aforementioned enhancements to the system management HMIapplication is described in detail herein below with reference to thefigures.

Before, describing the system management HMI application embodying thepresent invention, an exemplary process control networkenvironment/facility is briefly described. The present invention ispotentially incorporated in a variety of process control facilityarrangements, and other physical process control arrangements will beknown to those skilled in the art in view of the disclosure containedherein. Turning to FIG. 1, an exemplary simple process control systemarrangement/environment is depicted wherein an exemplary systemmanagement HMI application operates to provide user access toinformation representing the status of process control equipment for acontrolled plant/process. A workstation 102, comprising the systemmanagement HMI application provides access to a wide variety ofinformation associated with a process control system. Such informationoriginates, for example, from control processors, network switches,fieldbus modules, and field devices.

The workstation 102 comprises any of a variety of hardware/operatingsystem platforms. For example, the workstation 102 comprises a personalcomputer running any of a variety of operating systems such as:Microsoft Windows XP, Unix, Solaris, etc.

In an illustrative embodiment, the system management HMI applicationrequires fresh information. To avoid delays due to retrieval from lessdirect data sources, the workstation 102 receives both process andequipment/system data directly from a control module assembly 108described further herein below. The system management HMI applicationpresents a set of views of information concerning process control systemequipment that implement automated decision making and exercise controlover a controlled process.

In the illustrative example, the workstation 102 is connected via anEthernet interface/wiring to an Ethernet switch 106 via a network link105. Alternatively, a redundant mesh network provides a communicativepath between workstations, database servers, and the switch 106. TheEthernet switch 106 can be any of a variety of commercially availableswitches. By way of example the Ethernet switch 106 is one provided, forexample, by Allied Telesyn (e.g., model AT-8088/MT). While notspecifically depicted in FIG. 1, additional nodes, comprisingworkstations, servers and other elements (e.g., high level controlmodule assemblies) of a supervisory portion of the control system arepotentially connected to the switch 106.

The switch 106, and potentially other non-depicted switches, is alsocommunicatively coupled to the control module assembly 108. The controlmodule assembly 108 comprises one or more control modules (also referredto as control processors) that execute control programs driven byprocess sensor data values and render output values to devices (e.g.,valves, motors, etc.) controlling a plant process. An illustrativeexample of such control module is a FOXBORO CP model FCP270, by InvensysSystems, Inc. In other embodiments, process control functionality iscarried out in any of a variety of control modules—even by controlprograms incorporated into the workstations, intelligent transmitters,or virtually any communicatively coupled device capable of executingcontrol programs, loops, scripts, etc.

In an embodiment where the control module assembly 108 is the FOXBOROFCP270, workload is divided, within the FCP270, between controlling datacommunications and executing control programs (blocks). The FCP270processes data received from an I/O module assembly 110 in parallelusing the two distinct hardware modules—a block processor module and afield communications module. The block processor module periodicallyexecutes control programs, according to a user configurable processingcycle period (e.g., 100 ms). The output values of the control programsexecuted within the block processor module are driven by process datareceived by the control module assembly 108 from the I/O module assembly110. The I/O module assembly 110 comprises, by way of example, INVENSYSFBM207 and/or FBM217 fieldbus modules that pass digital input values tothe control module assembly 108.

With regard to the above-mentioned data communications task carried outby the control module assembly 108, in the illustrative example thefield communications module within the FCP270 receives data from the I/Omodule assembly 110. The received data is passed to both theabove-mentioned block processor module (within the control moduleassembly 108) and to process data subscribers according to anappropriate network communication protocol (e.g., TCP/IP) via thenetwork link 105. The protocols/mechanisms used to provide data tovarious subscribers varies in accordance with particular embodiments ofthe invention.

With continued reference to FIG. 1, the I/O module assembly 110,alternatively referred to as a field bus module (FBM), iscommunicatively coupled to the control module assembly 108.Communications protocols utilized for carrying out communicationsbetween the I/O module assembly 110 and control module assembly 108 arepotentially any one of a variety of proprietary/non-proprietarycommunications protocols. In one embodiment, the digital datacommunications between the control module assembly 108 and I/O moduleassembly 110 are carried out via a 2 MBit HDLC communication protocol.While only a single I/O module assembly 110 is depicted in theillustrative example, control systems embodying the present inventionpotentially comprise many I/O module assemblies.

I/O module assemblies, in general, incorporate one or more of a varietyof specialized interfaces for communicating directly and/or indirectlyto a variety of device types, including sensors/actuators embodyingparticular communications protocols, located at distributed locations ina plant. In the illustrative example, the I/O module assembly 110comprises a Foundation Fieldbus I/O module (e.g., an Invensys field busmodule model FBM228) that supports communications between the controlmodule assembly 108 and field devices coupled to a Foundation Fieldbusnetwork 111. In the illustrative embodiment, a set of representativeintelligent field devices 114 and 116, containing multipleapplication-dependent configurable parameters, are connected to theFoundation Fieldbus network 111. The field devices 114 and 116 operateat the lowest level of a control system to measure (transmitters) andcontrol (positioners, motor switches, etc.) plant activity. Atermination assembly 112 communicatively couples the I/O module assembly110 to the field devices 114 and 116. The termination assembly 112provides power and power conditioning to the extent needed by the fielddevices 114 and 116 on the network 111.

Having described an exemplary network environment within which a systemmanagement HMI application 200 embodying the present invention ispotentially incorporated, attention is directed to FIG. 2 that depictsan exemplary set of components associated with the system management HMIapplication 200 and their general relationships which facilitateinteractions between the HMI application 200 and a human user 201 via anHMI presentation component 203.

A system management configuration database 202 includes identificationsand addresses of data sources and sinks utilized by the systemmanagement HMI application 200. The information within the systemmanagement configuration database 202 includes indicators of the typesof equipment data and their relationships (i.e., their hierarchicallinks) that drive corresponding user interface displays rendered by thesystem management HMI presentation component 203.

The System management HMI application 200 receives updates for connectedprocess control system equipment parameters through a process controlsystem equipment data handler 204. The handler 204, in turn,communicates via inter-process communications (e.g., request/responsepairs and unsolicited alarm messages) with internal components 206 whichare the sources/recipients of data/commands from the HMI application200. The internal components 206, in turn, communicate with controlsystem equipment to receive status information and implement commandsinitiated by the user 201 via the HMI application 200.

Parent-child relationships specified between elements of a processcontrol system management tree defined within the database 202facilitates propagating alarms from most specific levels up to the topof a node tree representing the equipment whose status is monitoredand/or controlled by a user via the HMI application 200. When an alarmassociated with a particular piece of managed process controlequipment/device is set (e.g., a fieldbus module or field device is in a“fault state”), the particular node in the management tree associatedwith that process control equipment is set to an alarm state, resultingin a display state change of at least one displayed node on the tree asa result of an alarm propagation function carried out by the HMIapplication 200 that is described further herein below. Thus, if thenode associated with a particular piece of equipment in alarm ispresently not displayed, then one of its displayed ancestors changes toan alarm display state. Thereafter, the user 201 drills down to one ormore hierarchical tree levels until the source of the alarm is exposedfor selection by the user 201.

The system management HMI application 200 GUI supports the same generalequipment information presentation and equipment administration actioncapabilities as those present in the I/A SERIES SYSTEM MANAGEMENTDISPLAY HANDLER. The system management HMI application 200 GUI supportsviewing the health and performance of equipment including, for example:network switches, FBMs, field devices, integrated devices, andperformance counters in a station. The HMI application 200 GUI supportsacknowledging alarms associated with equipment. The system managementHMI application 200 GUI supports submitting change actions/commands toequipment including, for example, issuing commands for:inhibiting/enabling alarms, checkpointing, rebooting, updating anEEPROM, enabling/disabling upload/download, and enabling/disablingreports. In the case of equipment control blocks (ECB's) and fieldbuscommunication modules (FCMs) the system management HMI application 200GUI supports submitting commands, by way of example, for: updating anEEPROM, going online/offline, enabling/disabling switching buses,enabling/inhibiting device alarming, switching roles. The HMIapplication 200 GUI also supports offline diagnostics for stations(based on station type) and ECB's. Furthermore, the HMI application 200GUI supports calibrating intelligent field devices.

Turning to FIG. 3, an exemplary user interface is depicted that showsthe various user interface elements/functions supported by a graphicaluser interface providing enhanced data access and navigationcapabilities for use in the system management HMI application 200. Theexemplary GUI comprises a navigation pane 300 that presents ahierarchical tree view to browse process control system equipmentinformation and indicate status through combined use of icons, text,colors, and visual effects (e.g., flashing). An enlarged view of asimilar tree is provided in FIG. 7 to more clearly depict status iconsthat are presented alongside component nodes to identify present status.

The GUI also includes a component-specific information area 302 that isused to display a variety of general and specific informationcorresponding to a selected node displayed in the navigation pane 300.In an illustrative embodiment the component-specific information isorganized into “General Information”, “Connections”, and “Counters”groups that are accessed by selecting one of the three correspondinglylabeled controls 303 (e.g., buttons, tabs, etc.). The set of groupsdiffers in alternative embodiments. For example, another potential groupcomprises a set of diagnostics related information providing access to aset of component parameters relating to offline diagnostics. In additionto presenting current status/configuration information, the informationarea 302 supports user submission of new configuration information byselecting any write-enabled field and entering a new value for aparameter. Upon confirmation, the HMI application 200 transmits thechanged data to an appropriate piece of equipment via the data handlers204.

In the illustrative example set forth in FIG. 3, the component-specificinformation displayed in the information area 302 corresponds toinformation rendered in response to a user selecting the “GeneralInformation” control in the set of controls 303. The general informationdisplay mode comprises detailed status and configuration information fora currently selected equipment node depicted in the navigation pane 300.In the illustrative embodiment the general information for a selectedcomponent is divided into sub-groups that are displayed within anEquipment Status pane 304, an Equipment Configuration pane 306, and aSwitch Connections pane 308. It is noted that the types of informationand the groupings of parameters into particular panes within theinformation area 302 are defined according to the type of component thatis being accessed. Therefore, the content and groupings of informationdisplayed in area 302 for the selected control processor (ZCP703) isexemplary. The “Counters” and “Connection” display modes are depicted,by way of further examples, in FIGS. 4 and 5 described herein below.

The exemplary HMI application 200 GUI depicted in FIG. 3 also includesan accessories pane area 310 that, in contrast to the information pane302 which provides information for a single component, selectivelypresents a variety of lists for potentially many components including:messages, alarms, inhibited components, search list, watch list, and asystem monitor log. The accessories pane area 310 facilitates presentinga particular type of information across multiple components of theprocess control system. The types of multi-component informationpresented in the accessories pane area 310 are described herein below.

A menu bar 312 provides access to a variety of standardWINDOWS-supported actions.

A toolbar 314 described herein below provides direct access toparticular functions supported by the GUI of the system management HMI200. Furthermore, a status bar 316 provides a user with immediate statusinformation regarding the connectivity of a workstation (e.g., “AWSM01connected”) and a most recent system management message—includingtransient messages received from other subsystems. The various areas ofthe exemplary GUI for the system management HMI application 200 depictedin FIG. 3 are described further herein below.

The navigation pane 300 displays a collapsible tree (to reduce thequantity of displayed nodes) comprising a set of nodes representinghierarchical physical/logical relationships between various physicalcomponents of a process control system. An exemplary process controlsystem/network comprises stations, control processors, field I/O modulesand field devices. The process control system/network is graphicallypresented to users in the form of a tree within the navigation pane 300by logical domains and/or physically arranged by connection to networkswitches. The form and content of a hierarchical tree view of the systempresented upon the navigation pane is governed by a system configurationdefinition installed in the database 202 during setup of the system.

The hierarchical tree displayed within the navigation pane 300 ispresented in any one of a variety of selectable sorting criteria to suita current monitoring maintenance task. The sorting criterion selected bya user is thereafter applied at each level of the hierarchy. Particularsorting rules include:

System Monitor Domains sorted alphabetically

Logical (by System Monitor assignment)

Physical (by switch attachment)

Components sorted by name (the default sorting criterion)

Components Sorted by Type

Sorting the Navigation Pane by name order shall be the default.

In an exemplary embodiment the logical view is rendered when a userselects the SMON button 320. In the logical view, the system monitordomain name is displayed at the highest level of a displayed tree.Contained equipment nodes are displayed at lower levels of thenavigation tree's hierarchy based upon their logical/functionalrelationships. For example, a system monitor domain (e.g., SYSMN1)resides at the top level of the hierarchy. Expanding a system monitordomain node reveals a set of devices contained within its domain. Thesecond level of the tree thus includes a combination of connectedworkstations (e.g., AWSM03) and control processors (e.g., FCP805,ZCP703, etc.). In the case of control processors (e.g., ZCP703), a smallblock icon under each control station node, baring the same name,represents the station's Primary FBM, an equipment control block (thePrimaryECB) that manages communications with the attached FBMs. A set offield I/O devices (e.g., FBMs and FCMs) are connected to the Primary FBMnode at a next lower level.

Alternatively, when the Switch button 322 is selected, the networkswitches are displayed at the highest level and the navigation pane300's switch view depicts network switch components at the highest leveland connected stations and devices below. The Switch view showsequipment physically connected to the same MESH network switch device.

With continued reference to the navigation pane 300, the GUI for thesystem management HMI application 200 includes a variety of features toenhance users' ability to recognize potential problems through prominentdisplay of exceptions (e.g., alarms) by visual indicators at one or morenodes in the displayed tree view. Examples of such indicators includemultiple formats such as changing the color of a tag or other graphicalrepresentation of a system component to ensure differentiation betweennormal and abnormal operational states of represented equipment.Examples of differentiation include color, shape (alter or replacepreviously displayed icon/representation of component), and text.

In addition to graphically representing alarms or other status changesthrough modifications to a node corresponding to the changed component,the navigation tree functionality also supports indicating an importantcondition change (e.g., a failed component or warning) in a hidden nodeby propagating the change status to at least one ancestor of the hiddennode in a hierarchical tree. In an exemplary embodiment, such statuschanges are propagated to the highest level of a displayed navigationtree. The propagation feature is described further herein below withreference to FIGS. 7 and 8. Opening a set of branches under a higherlevel node reveals the source of the status change at a next lowerlevel. As further levels are opened at each node under exceptionalstatus, the user is guided by further node in alarm state at the nextlower level. Examples of exception status include: failure,unacknowledged alarm, inhibited, and non-responsive. Other exceptionstatus types are contemplated in alternative embodiments.

Furthermore, the navigation pane 300 supports accessing node-specificactions via context menus. Thus, once a user has identified a node forwhich an action needs to be taken (e.g., acknowledge an alarm), the userin many cases accesses a utility/operation for taking the desired actionby invoking the node's context menu and then selecting one of thefunctions presented via the context menu.

The toolbar 314 includes a set of controls (e.g., buttons, query fields,icons, etc.) providing access to frequently used functions supported bythe HMI application 200. The toolbar 314 area, by way of example,comprises a clock and calendar graphical interface and a fieldidentifying a master timekeeper's station (e.g., AWSM01). A traversednodes window 317 depicts a set of icons corresponding to a nodeselection path ending in the currently selected node on the displayedtree in the navigation pane 300 corresponding to the presently displayedinformation in information area 302. The traversed nodes windowgraphically depicts a user's navigation path down the displayed tree inthe navigation pane 300. A user can select any of the displayed icons torender the corresponding information in the area 302 and can be used asan alternative to the navigation pane 300 to select a component/node ofinterest.

The toolbar 314 also includes a query box and control supporting a “Goto:” type search function that facilitates locating and selecting acomponent by name (e.g., Letterbug) in the navigation pane 300's treeview. Rather than provide a list of results, the “Go to:” searchfunction traverses the set of system component information records for arecord corresponding to the supplied name. Once the desired componenthas been located, the associated information for the component isautomatically displayed in the information pane 302. The toolbar 314 canbe “hidden” to provide additional space for the accessories, navigationand/or component-specific information panes.

The Information pane 302 displays detailed information about a singlecomponent represented on the hierarchical tree of the navigation pane300. In fact, one of the easiest way to access the content for a systemcomponent for display within the information pane 302 is by selecting(e.g., double-clicking) that node on the hierarchical tree in thenavigation pane 300. Examples of selectable system equipment for whichinformation is displayable in the information pane 302 include: astation, fieldbus module, field device, integrated peripheral device ornetwork switch.

Furthermore, as noted previously herein above, the potentially largequantities of information associated with a particular selectedcomponent displayed within the information area 302 are divided intothree general groups, corresponding to the General, Connections andCounters controls 303, to facilitate their display within the confinedspace of area 302. The “General” information group is described above.Turning to FIG. 4, an exemplary display is presented of the informationarea 302 while in the “Counters” information group display mode. In theillustrative embodiment a set of counter categories 400 are presentedwithin the information area 302. Each one of the selectable categories(of which potentially multiple ones can be simultaneously selected)corresponds to a particular set of network communications protocollayer-related counters. The counter values are displayed in table formatcontaining, by way of example, columns identifying: a counter name,current value, previous value, lowest value and highest value. Thesecounter information types are exemplary and other types of informationfor a counter parameter will be presented in alternative embodiments. Inan illustrative embodiment the HMI application 200 supports designatingthe refresh behavior of the counters including: refresh on demand,refresh only some parameters, refresh all or a portion of the displayedparameters on a periodic basis. A reset control will also resetting allor individual ones of the counters.

Turning briefly to FIG. 5, an exemplary display is presented of theinformation area 302 while in the “Connections” information groupdisplay mode. In the illustrative embodiment a set of connectionsbetween the selected component and other system components areidentified by naming the connected entity in a “Name” column. Othercolumns display for each connection the following: a connection type, acurrent status, an operating mode (e.g., online/offline), and a failedstate. The list of connection-related information is exemplary. Otherconnection parameters are provided in alternative embodiments.

Having described the component-specific information area 302, attentionis again directed to the accessories pane 310 to describe an exemplaryset of types of information presented within the accessories pane area310 for multiple system components. Referring to FIG. 3, messages (e.g.,informational and alarm) relating to any of various system componentsare generated by the process control system management internalcomponents 206. The messages are forwarded to the system management HMIapplication 200 and displayed in the status bar 316. However, asubsequent message overwrites a previous message. In an exemplaryembodiment, the list of messages is archived until conditionally (e.g.,on a per-session basis, until cleared by a user, when a circular bufferis filled). When a user selects a “Messages” control at the top of theaccessories pane 310, the list of messages (potentially filtered) ispresented. In addition to the message itself, each message list entrywill include a timestamp.

An “Alarms” control within the accessories pane area 310 is used toinvoke a utility that enables a user to review a list of system alarms.With reference again to FIG. 3, the accessories pane area 310, whileoperating in the watch mode, displays a list of alarm messages frommultiple system components. In the illustrative embodiment, the alarmsgraphical user interface includes a set of columns for specifying: anacknowledge status, an index number, a data/time stamp, a source stationof the alarm message, a path of a component from which the alarm arose(used to propagate an alarm to ancestors on the tree within thenavigation pane 300), and an alarm message. The user interface supportsselecting and acknowledging a single alarm, all pending alarms, andparticular types of alarms (e.g., cable connection alarms).

An “Inhibited” control within the accessories pane area 310 is used toinvoke a utility for listing all components for which alarms areinhibited. Furthermore, the accessories pane area 310, while presentinga user interface corresponding to an Inhibited mode, will support a userselecting and enabling particular listed alarms.

A “Search” control supported by the accessories pane area 310 of the HMIapplication 200 provides access to a utility that enables a user tosearch for a component based on a piece of configuration information,then navigate to that component's information. Referring to FIG. 6, anexemplary graphical user interface is provided that is generated withinthe accessories pane area 310 when a user selects the “Search” control.The search utility interface presents a set of searchable categories ina search definition pane 600 that enables a user to specify a searchstring or strings that will govern a subsequent search of systemcomponent records maintained within the system management configurationdatabase 202. While the illustrative embodiment limits searching toinformation in the configuration database, alternative embodimentsinclude searching dynamic, runtime databases.

The exemplary search utility, as shown in FIG. 6, supports a variety ofsearch parameters for components including: category (e.g., controlprocessor, FBM, etc.), type (e.g., ZCP, FCP, etc.), name, associatedsystem monitor, associated switch, boot host, and FT (fault tolerant)state. Furthermore, in fields where a text string is provided, thesearch function supports wildcard designators. When a user completes asearch definition, the “Search” button is selected to submit the queryfor processing. The search criterion defined by a user is processed by adatabase of system component information. A user can stop the query byselecting the “Stop” button.

A results field 610 supports rendering a set of results provided by thedatabase meeting a specified search criterion. The results field 610returns a list of matched component records. In the illustrativeembodiment the returned results include a component name, visual (e.g.,icon-based) current status indicators, component type, and a path of thecomponent. The path is passed to records access functionality associatedwith the navigation pane 300 (mimicking a user's selection of a nodewithin the navigation pane 300) to automatically access correspondinginformation for a selected component upon a user's selection of an entryin the results field 610. The contents of the selected component arethereafter displayed within the information pane 302.

A “Watch” control within the accessories pane area 310 is used to invokea utility that enables a user to observe counters supported by multiplesources of counter data, including components running on multipledistinct stations. With reference again to FIG. 4 the accessories panearea 310, while operating in the watch mode, displays a set ofuser-designated watched counters for a set of distinct components. Awatched counter within the accessories pane area 310 is designated byfirst selecting a counter listed within the information pane 302. Theselected counter is then added to the list of watched counters displayedin the accessories pane 310 in response to the user selecting a watchbutton 400 within the accessories pane 310. The HMI application willcontinue to track the selected counter even after another device isselected from the navigation pane 300 to display the new components'counters. The types of counter information displayed in the informationarea 302 and in the accessories pane area 310 are dependent uponcomponent type and will vary in accordance with alternative embodimentsof the system management HMI application 200. With regard to refreshingcounter values displayed in the accessories pane 310, the exemplaryembodiment supports a variety of refresh modes/commands including readon demand and periodic update modes. The pane area 310, while operatingin the “Watch” mode, displays the following information for eachdesignated counter: counter name, current value, maximum value, minimumvalue, and source name. Furthermore, in an alternative embodiment, theWatch mode of the accessories pane area 310 supports setting thresholdlimits on counters and including a visual indication on the watchcontrol (e.g., the button/tab flashes, changes color, etc.) on the userinterface.

A “Smon Log” control within the accessories pane area 310 is used toinvoke a utility that enables a user to observe and clear contents of asystem monitor's log file.

Turning to FIG. 7, a further illustrative example of an enhancedhierarchical component tree displayed within the navigation pane 300 isprovided in an enlarged form to facilitate describing the HMIapplication 200's supplementation of the component tree nodes to includea variety of status indicators as well as further illustrate the abilityto propagate an exception to parent nodes on a navigation tree. A legendwindow 800 is provided in FIG. 8 that provides short explanations ofeach of the different types of status indicators supported on the treeview of the components in the navigation pane 300. The legend window 800is rendered upon user request (via a help menu item on the Menu bar 312)to aid interpreting the various status indicators incorporated into thedisplay of components within the navigation pane.

As a tutorial on the various status indicators supported in anillustrative embodiment, the meaning of each of the symbols in FIG. 8will be described prior to describing the illustrative navigation treeportion depicted in FIG. 7. In the illustrative embodiment, the legend800 defines icon symbols that convey unique status/alarm conditionsbased upon symbolic graphics, text and/or colors.

First, a set of equipment icons are depicted on the left column of thelegend window 800. The equipment icons are assigned on a one-per-nodebasis on the navigation tree.

A SMON icon represents a system monitor domain which corresponds to alogical association of monitored system equipment.

An AW icon represents a workstation. Workstations are at the secondlevel of the hierarchical navigation pane tree.

A WP icon represents a workstation. Workstations are at the second levelof the hierarchical navigation pane tree. The illustrative exampleincludes two types of control processor/station icons.

A CP icon corresponds to non-redundant control processor arrangement.

An FT CP icon, including a small superscript “2” indicates a faulttolerant control processor.

A Switch icon represents an Ethernet switch in a “switch” view of thenavigation tree hierarchy.

A Switch port icon is not used in the tree view. However, it is used torepresent a switch in the information pane when a switch is selected bya user.

A Primary FBM icon, found under each control station in the tree,represents the primary FBM for the station, an equipment control blockthat manages communications with the attached FBMs. An auto, SwA, or SwBmodifier on the right side of the icon indicates the configuration ofthe component in a fault tolerant communications bus arrangement.

An FCM icon, represents a fieldbus communications module which connectcontrol processors to fieldbus modules in fault tolerant busconfigurations. The appearance of the FCM icon is modified to indicatewhich bus is being used.

An FBM icon represents fieldbus modules which connect to either aPrimary FBM or an FCM. Labels to the right of the FBM icon indicatecommunications status between the FBM and its host

A device icon is used to represent an attached intelligent field device.

A Peripheral icon represents computer peripherals such as printers andannunciator panels.

Having described the icons representing components in a process controlsystem, a set of status indicators, used to indicate the status ofpresented components, are depicted on the right column of the legendwindow 800. In general the system management HMI application 200 s GUIindicates equipment health status by attaching symbols to the upper leftcorner of the equipment's icon and, if Enable blinking is checked in theconfiguration dialog box for the particular piece of equipment, thencolor-coding of the equipment name. Similarly, the status of alarmsassociated with particular equipment is indicated by attaching symbolsto the lower left corner of the equipment's icon. The status indicationscheme described herein is used in the Navigation pane 300, thetraversed nodes window 317, the Connections display mode the informationpane 302, and the results table in the accessories pane 310's Searchmode display. The description of the status indicators below shows howsymbols, text, blinking, and color-coding are used to visually conveyalarm states and indicate equipment health status in association withicons representing specific system equipment. As noted above, exceptionand alarm states are propagated up a tree's hierarchy in the navigationpane 300. Therefore, an exception status can indicate an exception ineither a node displaying an exception status indicator or one of itspotentially hidden children. Normal condition is represented by anequipment icon with none of the exception status indicators describedherein below.

Regarding Alarm Status:

An Unacknowledged icon indicates that there is an unacknowledged alarmat either the represented equipment of connected equipment attached at alower level in the navigation pane 300's tree. The name tag for theequipment will flash if blinking is enabled. Unacknowledged alarm statusis propagated from its source equipment to all ancestor nodes.

An Inhibited icon indicates that alarms are inhibited on the specificdevice. Inhibited alarm status is not propagated to other nodes on anavigation tree.

Regarding Equipment Health Status:

A Warning icon indicates that there is at least one child device in anexception state attached to the equipment represented in the presenticon.

A Failed icon indicates that the equipment represented by the particularnode has failed. The Failure status of equipment is propagated to anddisplayed adjacent to a parent equipment (e.g., a control processor)icon in the form of a Warning Icon. An equipment failure at any level ispropagated and displayed as a Failure icon adjacent to the correspondingSystem Monitor (SMON) icon.

An Unknown icon indicates that the present status of the specificequipment associated with the node is presently unknown.

An Offline icon indicates that the equipment represented by theparticular node is presently offline.

A number of connectivity status indicators are supported forrepresenting the status of communications in redundant, fault-tolerantnetwork link arrangements. They include:

A Bus A (or B) Enabled icon indicates an operator specified busselection.

A Bus Auto Select icon indicates an automatic bus selection status/mode.

A Cable A (or B or AB) Inhibited icon indicates whether thecommunication is forced to only one of the two possible communicationpathways by inhibiting communication on the second bus.

A Cable Fault icon indicates a cable fault.

A Cable A (or B or AB) Failed icon indicates a specific one or bothcables failed in a fault tolerant cable configuration.

A Receiver A (or B) Failed icon indicates that one of the receivers on apiece of equipment's network interface has malfunctioned.

The system management HMI application 200 GUI uses a variety of symbolsand text to indicate system equipment health status changes. In additionto marking the problematic equipment, the equipment health status changeis propagated to parent equipment and the system monitor node with whichthe problematic is associated. Turning to FIG. 7, an exemplary portionof the navigation pane 300 is provided as an example of how the systemequipment monitor displays propagated status such that a fault at alower level of the hierarchy will be visually displayed even if thesource of the fault is not exposed in the navigation pane 300.

In the particular example, the tree diagram shows propagation of thefaults from the lowest equipment levels of the system to the highestlevel (the logical system monitor domain AQ2SMN) of the system. Rulesfor how fault indicators are propagated are dependent on the equipmentand are not part of the logic of the HMI application 200 disclosedherein. The HMI application 200 gathers up the fault indicatorinformation and displays the appropriate indication to aid the user innavigating to a problem equipment component where action may be taken.Thus, the HMI application 200 leverages existing infrastructure thatpropagates alarms and other fault indications within the system andreports the information in the form of well-defined status iconsdisplayed adjacent an appropriate node of the system status tree withinthe navigation pane 300.

With continued reference to FIG. 7, working down from the System MonitorDomain level (AQ2SMN) a circle with an “X” indicator shows that acontained equipment is faulted. The asterisk (*) indicates the fault hasnot been acknowledged. System monitors cannot fail themselves as theyare logical groups of equipment. However, a system monitor node (thehighest level of the navigation tree) indicator reflects the most severestatus of a contained device.

At the station level two faults are shown, the first on a ControlProcessor station shows an unacknowledged warning (FCP200) to indicatethat an attached peripheral or child equipment has failed. The redfailed symbol is not shown on the Control Processor as that wouldindicate the station itself was failed. Below the station (FCP200), oneof a set of attached Field Bus Modules is failed (FCP204). If a devicecontained by a fieldbus module was failed then a red failed indicator isdisplayed on the device and a yellow warning indicator would be shown onthe Field Bus Module. An unacknowledged fault of an attached device isindicated on a workstation (AQUA03). It shows the yellow warningindicator and an asterisk. As shown in the exemplary case, thenavigation tree aspect of the system monitor HMI application 200provides enhanced notification capabilities through the use of graphicalstatus representations (e.g., icons) and through display of propagatedstatus at the highest (system monitor domain) level of the navigationpane.

The structures, techniques, user interfaces and associated benefitsdiscussed above are merely exemplary embodiments of the inventioncarried out by software executed upon a computer and stored on computerreadable media in the form of computer executable instructions: In viewof the many possible embodiments to which the principles of thisinvention may be applied, it should be recognized that the embodimentsdescribed herein with respect to the drawing figures are meant to beillustrative only and should not be taken as limiting the scope ofinvention. The illustrated embodiments can be modified in arrangementand detail without departing from the spirit of the invention. Moreover,those of skill in the art will recognize that the disclosed principlesare not limited to any particular local area network protocols and/ortopologies. Therefore, the invention as described herein contemplatesall such embodiments as may come within the scope of the followingclaims and equivalents thereof.

1. A system management HMI application including: a multi-panedinterface including: a navigation pane including a hierarchical treeincluding nodes corresponding to control system equipment, and acomponent-specific information pane providing detailed informationcorresponding to a selected node on the navigation pane wherein thedetailed information includes diagnostic information; and wherein thehierarchical tree includes a logical monitor node at a highest level ofthe hierarchical tree and wherein status of lower nodes propagates fromlower nodes up to the logical monitor node.